Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5y7jk3roXWMCnmOlrlWyu8EIjP4.roa
File: 5y7jk3roXWMCnmOlrlWyu8EIjP4.roa (raw, json)
Hash identifier: tOlj951X7OfrCeCk8NpyMkahnTYMkAI54xLkFE2LMpQ=
Subject key identifier: E7:2E:E3:93:7A:E8:5D:63:02:9E:63:A5:AE:55:B2:BB:C1:08:8C:FE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190D551B111D0AE8D5B7BA5A1AB0C64D13E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5y7jk3roXWMCnmOlrlWyu8EIjP4.roa
Signing time: Sun 21 Jul 2024 12:43:39 +0000
ROA not before: Sun 21 Jul 2024 12:43:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197537
IP address blocks: 82.152.176.0/24 maxlen: 24
89.213.206.0/23 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.214.0/24 maxlen: 24
89.213.215.0/24 maxlen: 24
194.105.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 16:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d5:51:b1:11:d0:ae:8d:5b:7b:a5:a1:ab:0c:64:d1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 21 12:43:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e72ee3937ae85d63029e63a5ae55b2bbc1088cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:31:40:7c:ad:98:ae:ad:b0:4d:c5:d3:a0:
3b:5b:d5:0a:48:05:ab:24:08:6b:7e:6a:cb:6e:1e:
b0:f6:cc:0e:3c:b4:fa:34:4e:41:f3:e5:3a:00:79:
7f:99:f0:a8:72:82:95:db:39:ab:7f:66:96:09:a3:
53:2b:78:fb:96:9b:f2:0a:da:1c:02:3d:8f:f6:2e:
4a:2b:cd:6b:44:85:ab:33:64:bc:7e:74:43:08:cf:
7b:e8:cf:ac:d4:79:2c:3b:ce:4b:9f:77:7c:1e:03:
50:76:e8:e5:d3:ec:9d:09:eb:92:8f:30:59:d5:8b:
32:01:e2:07:98:9d:36:df:a5:8c:77:42:92:68:e5:
05:4e:51:7c:c6:9f:e9:4e:3f:96:48:3c:f9:71:27:
00:02:6e:b1:51:e9:f5:2b:df:4a:cd:45:b5:21:4f:
8b:fe:b7:23:47:5c:a9:b7:68:28:99:49:6e:7d:01:
26:cc:7b:2d:54:be:fd:6a:16:44:7c:54:23:32:e5:
96:50:d1:e6:50:e4:76:ae:31:cc:78:62:7d:b7:7d:
04:b3:6b:4f:e3:7d:4f:4b:83:57:02:0d:1b:83:e6:
8c:5a:6b:c1:ca:f2:f4:5a:69:20:30:47:fb:c2:cf:
d6:e9:69:78:22:96:f2:18:7a:59:a4:c6:79:bd:55:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2E:E3:93:7A:E8:5D:63:02:9E:63:A5:AE:55:B2:BB:C1:08:8C:FE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5y7jk3roXWMCnmOlrlWyu8EIjP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/24
89.213.206.0/23
89.213.212.0/24
89.213.214.0/23
194.105.76.0/22
Signature Algorithm: sha256WithRSAEncryption
91:77:2e:ed:2b:e1:de:a2:2e:6a:5e:d9:09:4b:39:2e:20:fc:
01:70:16:03:60:0e:ca:f4:9b:71:a6:70:46:d4:f2:75:61:87:
0d:81:99:59:0c:b1:fe:09:9e:57:5c:b8:ad:b9:1b:0f:09:dc:
b9:58:7f:37:66:03:38:f6:3a:05:3b:22:3e:86:b5:fa:fc:01:
64:cf:1e:b9:55:5c:c8:a7:c0:fe:e8:6d:72:bc:78:bf:08:a8:
c5:81:66:71:22:1e:05:99:17:1c:66:2b:23:7a:bd:ac:22:35:
eb:ac:02:92:ef:66:41:ee:58:71:87:87:c1:c8:ab:9c:61:95:
af:c6:1a:d5:94:dc:70:8f:fe:48:9d:48:bd:f5:a8:24:cd:f5:
ac:a6:af:d2:7f:98:2e:ff:96:e0:0c:15:0a:7a:fe:a9:0b:f8:
82:0b:f6:3f:61:06:62:df:42:0e:8d:15:ba:84:4b:1e:b0:52:
75:30:d2:19:af:a7:9a:89:28:6e:57:98:2e:78:37:54:0b:9b:
5c:ee:63:d2:a7:64:72:9d:63:95:c3:33:ad:69:4d:b6:9a:58:
9e:69:e9:cd:0f:51:48:93:f7:3f:5e:9b:b0:ee:9e:5a:74:00:
fa:09:fc:eb:99:f7:2a:1e:e1:b4:e7:4c:fd:7b:16:0f:0e:ca:
99:c7:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:24:45 2025 by rpki-client